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DETAILED ACTION 

Remarks 

1. In response to communications filed on 22-December-2003, claims 1-50 are 
presently pending in the application. 

Claim Rejections - 35 USC §102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

3. Claims 1, 8-9, 14-15, 22-23, 28-29, 35, 39-40, 46, and 50 are rejected under 35 
U.S.C. 102(b) as being anticipated by Anderl et al. (Intemational Publication No. 87/ 
07062). 

As to claim 1, Anderl et al. teaches a portable security system for managing 
access to a portable data storage cartridge, the data storage cartridge having data storage 
media for storing data for read/write access by a user of a data storage drive when 
mounted in the data storage drive (see abstract), the portable security system comprising: 

a wireless interface mounted in the portable data storage cartridge for receiving 
power and data fi-om, and sending data to, the data storage drive when mounted in the 
data storage drive (see page 5, line 31 through page 6, line 23); and 
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a computer processor mounted in the portable data storage cartridge and coupled 
to the wireless interface (see figure 1, reference numbers 110, 120, 130); the computer 
processor powered by the wireless interface and receiving and transmitting data to the 
data storage drive via the wireless interface (see page 5, line 31 through page 6, line 23); 
the computer processor having a user table comprising at least a unique user identifier for 
each authorized user and at least one permitted activity the user is authorized to conduct 
with respect to the data storage media (see page 11, lines 14-26, where "user identifier" is 
read on "login level"), the user identifier, when combined with a user authentication 
message firom the authorized user in accordance with a predetermined algorithm, 
authorizes the user (see page 11, lines 14-20); the computer processor receiving the user 
authentication messages fi-om the data storage drive via the wireless interface, combining 
the user authentication message with the user identifier fi-om the user table in accordance 
with the predetermined algorithm to authorize or deny the user activity, and transmitting 
the user authorization or denial to the data storage drive via the wireless interface (see 
page 12, lines 7-15, and see figure 7). 

As to claims 8, 22, and 46, Anderl et al. teaches wherein the computer processor 
user table comprises a separate entry for each the user identifier, the entry comprising all 
the permitted activities the user is authorized to conduct (see figure 6). 

As to claims 9 and 23, Anderl et al teaches wherein the computer processor 
additionally comprises a nonvolatile memory storing the user table (see page 11, lines 21- 
26). 
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As to claims 14, 28, 39, and 50, Anderl et al teaches wherein the data stored in 
the data storage media is encrypted, wherein the computer processor user table permitted 
activities comprise at least 1) read access to data stored in the data storage media, and 
wherein the user authorization for the read access additionally comprises a decryption 
key for the encrypted stored data (page 2, lines 20-23, where it is inherent that user 
authorization would have to comprise a decryption key if the data was encrypted). 

As to claim 15, Anderl et al teaches a data storage cartridge for storing data for 
read/write access by a user of a data storage drive when mounted in the data storage drive 
(see abstract), comprising: 

data storage media mounted in the data storage cartridge for storing the data for 
the read/write access (see figure 1, reference number 1 15); a wireless interface mounted 
in the portable data storage cartridge for receiving power and data from, and sending data 
to, the data storage drive when mounted in the data storage drive (see page 5, line 31 
through page 6, line 23); and 

a computer processor mounted in the portable data storage cartridge and coupled 
to the wireless interface (see figure 1, reference numbers 110, 120, 130); the computer 
processor powered by the wireless interface and receiving and transmitting data to the 
data storage drive via the wireless interface (see page 5, line 31 through page 6, line 23); 
the computer processor having a user table comprising at least a unique user identifier for 
each authorized user and at least one permitted activity the user is authorized to conduct 
with respect to the data storage media (see page 11, lines 14-26, where "user identifier" is 
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read on "login level"), the user identifier, when combined with a user authentication 
message from the authorized user in accordance with a predetermined algorithm, 
authorizes the user (see page 11, lines 14-20); the computer processor receiving the user 
authentication messages from the data storage drive via the wireless interface, combining 
the user authentication message with the user identifier from the user table in accordance 
with the predetermined algorithm to authorize or deny the user activity, and transmitting 
the user authorization or denial to the data storage drive via the wireless interface (see 
page 12, lines 7-15, and see figure 7). 

As to claim 29, Anderl et al. teaches a method for providing a portable secure 
interface to a data storage cartridge (see abstract, where it is inherent that "a method for 
providing a portable secure interface to a data storage cartridge" is disclosed in "a 
portable data carrier system" that does not provide information of particular applications 
or file structure to its users), the data storage cartridge having data storage media for 
storing data for read/write access by a user of a data storage drive when mounted in the 
data storage drive (see figure 1, reference number 115), and a wireless interface mounted 
in the portable data storage cartridge for receiving power and data from, and sending data 
to, the data storage drive when mounted in the data storage drive (see page 5, line 3 1 
through page 6, line 23), the data storage cartridge having a user table comprising at least 
a unique user identifier for each authorized user and at least one permitted activity the 
user is authorized to conduct with respect to the data storage media (see page 11, lines 
14-26, where "user identifier" is read on "login level"), the user identifier, when 
combined with a user authentication message from the authorized user in accordance with 
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a predetermined algorithm, authorizes the user (see page 11, lines 14-20), the method 
comprising the steps of: 

receiving the user authentication messages from the data storage drive via the 
wireless interface (see page 11, lines 14-20); 

combining the user authentication message with the user identifier from the user 
table in accordance with the predetermined algorithm to authorize or deny the user 
activity (see page 12, lines 7-15); and 

transmitting the user authorization or denial to the data storage drive via the 
wireless interface (see figure 7). 

As to claim 35, Anderl et al. teaches wherein the step of providing the user table 
comprises a separate entry for each the user identifier, the entry comprising all the 
permitted activities the user is authorized to conduct (see figure 6); and wherein the 
transmitting step additionally comprises identifying the user permitted activities from the 
user separate entry (see page 12, lines 7-15, and see figure 17). 

As to claim 40, Anderl et ah teaches a computer program product usable with a 
programmable Computer processor having computer readable program code embodied 
therein for providing a secure interface to a data storage cartridge (see abstract), the 
programmable computer processor mounted in the data storage cartridge (see figure 1, 
reference number 110), the data storage cartridge having data storage media for storing 
data for read/write access by a user of a data storage drive when mounted in the data 
storage drive (see figure 1, reference number 115), and a wireless interface mounted in 
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the portable data storage cartridge for receiving power and data from, and sending data 
to, the data storage drive when mounted in the data storage drive (see page 5, line 31 
through page 6, line 23) , the computer program product comprising: 

computer readable program code which causes the programmable computer 
processor to provide a user table comprising at least a unique user identifier for each 
authorized user and at least one permitted activity the user is authorized to conduct with 
respect to the data storage media (see page 11, lines 14-26, where "user identifier" is read 
on "login level"), the user identifier, when combined with a user authentication message 
from the authorized user in accordance with a predetermined algorithm, authorizes the 
user (see page 11, lines 14-20); 

computer readable program code which causes the programmable computer 
processor to receive the user authentication messages from the data storage drive via the 
wireless interface (see page 11, lines 14-20); 

computer readable program code which causes the programmable computer 
processor to combine the user authentication message with the user identifier from the 
user table in accordance with the predetermined algorithm to authorize or deny the user 
activity (see page 12, lines 7-15); and 

computer readable program code which causes the programmable computer 
processor to transmit the user authorization or denial to the data storage drive via the 
wireless interface (see figure 7). 
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Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 2 and 16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Anderl et al. (International Publication No. 87/07062) in view of Davis (U.S. patent No. 
4,941,201). 

As to claims 2 and 16, Anderl et al. does not teach wherein the wireless interface 
comprises an RF interface. 

Davis teaches wherein the wireless interface comprises an RF interface (see 
Davis , column 5, lines 55-61 and see column 21, lines 31-46, where 100 kHz is in the RF 
range of the Electromagnetic Spectrum). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Anderl et al. to include wherein the 
wireless interface comprises an RF interface. 

It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Anderl et al. by the teachings of Davis because 
wherein the wireless interface comprises an RF interface would make the propagation 
delay between the outputs of the inverters 5 microseconds (see Davis , column 21, lines 
39-46). 
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6. Claims 3-5, 17-19, 30-32, 41-43, are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Anderl et al. (International Publication No. 87/07062) in view of 
Ichikawa (U.S. patent No. 5,872,846). 

As to claims 3, 17, 30, and 41, Anderl et al. , teaches wherein each the user 
identifier comprises a user symbol and a user decrypting key (see page 11, lines 14-20, 
where "user symbol" is read on "login level" and "decrypting key" is read on 
"password"). 

Anderl et al. does not teach wherein the user authentication message comprises an 
encrypted user authentication message which may be decrypted by the user decrypting 
key, and wherein the computer processor conducts the combination by decrypting the 
user authentication message by the user decrypting key. 

Ichikawa teaches wherein the user authentication message comprises an encrypted 
user authentication message which may be decrypted by the user decrypting key, and 
wherein the computer processor conducts the combination by decrypting the user 
authentication message by the user decrypting key (see column 6, lines 9-20). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Anderl et al to include wherein the 
user authentication message comprises an encrypted user authentication message which 
may be decrypted by the user decrypting key, and wherein the computer processor 
conducts the combination by decrypting the user authentication message by the user 
decrypting key. 
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It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Anderl et al. by the teachings of Ichikawa 
because wherein the user authentication message comprises an encrypted user 
authentication message which may be decrypted by the user decrypting key, and wherein 
the computer processor conducts the combination by decrypting the user authentication 
message by the user decrypting key would provide an additional layer of security and 
provide a unique signature of the sender (see Ichikawa , column 6, lines 21-25). 

As to claims 4, 18, 31, and 42, Anderl et al. as modified, teaches wherein the user 
decrypting key comprises a sender public key, and wherein the predetermined algorithm 
comprises a public key cryptographic algorithm (see Ichikawa , column 6, lines 9-20). 

As to claims 5, and 19, Anderl et al. as modified, teaches wherein the user 
authentication message is encrypted by a sender private key and a receiver pubhc key, 
and wherein the public key cryptographic algorithm decrypts the user authentication 
message employing a receiver private key and the sender public key, whereby the user 
authentication message is known to have come from the user (see Ichikawa , column 6, 
lines 9-20). 

As to claims 32 and 43, Anderl et al. as modified, teaches wherein the user 
authentication message is encrypted by a sender private key and a receiver public key, 
wherein the public key cryptographic algorithm decrypts the user authentication message 
employing a receiver private key and the sender public key, and wherein the combining 
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step comprises decrypting the user authentication message by the receiver private key and 
the sender public key, whereby the user authentication message is known to have come 
from the user (see Ichikawa , column 6, lines 9-20). 

7. Claims 6-7, 10-13, 20-21, 24-27, 33-34, 36-38, 44-45 and 47-49, are rejected 
under 35 U.S.C. 103(a) as being unpatentable over Anderl et al. (International Publication 
No. 87/07062) in view of Bapat et al. (U.S. patent No. 6,038,563). 



As to claims 6, 20, and 44, Anderl et al. . teaches wherein the computer processor 
user table permitted activities comprise a plurality of permitted activities, selected ones of 
which each of the users may be authorized to conduct, the permitted activities comprising 
1) read access to data stored in the data storage media, 2) write access to data stored in 
the data storage media (see figure 6). 

Anderl et al. does not teach the permitted activities comprising 3) read the user 
entry of the user table, 4) read all entries of the user table, 5) add entries to the user table, 
and 6) change/delete entries to the user table. 

Bapat et al. teaches the permitted activities comprising 3) read the user entry of 
the user table, 4) read all entries of the user table, 5) add entries to the user table, and 6) 
change/delete entries to the user table (see column 10, lines 35-47). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Anderl et al. to include the permitted 
activities comprising 3) read the user entry of the user table, 4) read all entries of the user 
table, 5) add entries to the user table, and 6) change/delete entries to the user table. 
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It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Anderl et al. by the teachings of Bapat et al. 
because the permitted activities comprising 3) read the user entry of the user table, 4) 
read all entries of the user table, 5) add entries to the user table, and 6) change/delete 
entries to the user table would give a way to grand or deny access to certain users (see 
Bapat et al. . column 1 1, lines 4-7). 

As to claims 7, 21, and 45, Anderl et al. does not teach wherein the computer 
processor user table comprises a separate entry for each the user identifier and the 
permitted activity the user is authorized to conduct. 

Bapat et al. teaches wherein the computer processor user table comprises a 
separate entry for each the user identifier and the permitted activity the user is authorized 
to conduct (see column 10, lines 35-47). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Anderl et al. to include wherein the 
computer processor user table comprises a separate entry for each the user identifier and 
the permitted activity the user is authorized to conduct. 

It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Anderl et al. by the teachings of Bapat et al. 
because wherein the computer processor user table comprises a separate entry for each 
the user identifier and the permitted activity the user is authorized to conduct would give 
a way to grand or deny access to certain users (see Bapat et al. , column 11, lines 4-7). 
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As to claims 10, 24, 36, and 47, Anderl et al. teaches receiving the user 
authentication messages from the data storage drive via the wireless interface, and 
transmitting the class authorization or denial to the data storage drive via the wireless 
interface (see page 12, lines 7-15, and see figure 7). 

Anderl et al does not teach wherein the computer processor additionally 
comprises a class table comprising at least a unique class identifier for each authorized 
class of users and at least one permitted activity the class of users is authorized to conduct 
with respect to the data storage media, the class identifier, when combined with a user 
authentication message from a user of the authorized class of users in accordance with the 
predetermined algorithm, authorizes the user; and wherein the computer processor 
additionally, upon receiving the user authentication messages from the data storage drive 
via the wireless interface, combining the user authentication message with the class 
identifier from the class table in accordance with the predetermined algorithm to 
authorize or deny the class activity to the user, and transmitting the class authorization or 
denial to the data storage drive via the wireless interface. 

Bapat et al. teaches wherein the computer processor additionally comprises a class 
table comprising at least a unique class identifier for each authorized class of users and at 
least one permitted activity the class of users is authorized to conduct with respect to the 
data storage media, the class identifier (see column 10, lines 35-47), when combined with 
a user authentication message from a user of the authorized class of users in accordance 
with the predetermined algorithm, authorizes the user (see figure 5); and wherein the 
computer processor additionally, upon receiving the user authentication messages, 
combining the user authentication message with the class identifier from the class table in 
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accordance with the predetermined algorithm to authorize or deny the class activity to the 
user, and transmitting the class authorization or denial (see figure 6). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Anderl et aL to include wherein the 
computer processor additionally comprises a class table comprising at least a unique class 
identifier for each authorized class of users and at least one permitted activity the class of 
users is authorized to conduct with respect to the data storage media, the class identifier, 
when combined with a user authentication message from a user of the authorized class of 
users in accordance with the predetermined algorithm, authorizes the user; and wherein 
the computer processor additionally, upon receiving the user authentication messages 
from the data storage drive via the wireless interface, combining the user authentication 
message with the class identifier from the class table in accordance with the 
predetermined algorithm to authorize or deny the class activity to the user, and 
transmitting the class authorization or denial to the data storage drive via the wireless 
interface. 

It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Anderl et aL by the teachings of Bapat et al. 
because wherein the computer processor additionally comprises a class table comprising 
at least a unique class identifier for each authorized class of users and at least one 
permitted activity the class of users is authorized to conduct with respect to the data 
storage media, the class identifier, when combined with a user authentication message 
from a user of the authorized class of users in accordance with the predetermined 
algorithm, authorizes the user; and wherein the computer processor additionally, upon 
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receiving the user authentication messages from the data storage drive via the wireless 
interface, combining the user authentication message v^ith the class identifier from the 
class table in accordance with the predetermined algorithm to authorize or deny the class 
activity to the user, and transmitting the class authorization or denial to the data storage 
drive via the wireless interface would make a easy way to define a set of access rules to 
grant access rights to a broad group of users (see Bapat et al. . column 11, lines 59-56) and 
would help to reduce the amount of data required to define access rules (see Bapat et al. , 
colunrn 9, lines 48-50). 

As to claims 11, 25, 37 and 48, Anderl et aL as modified, teaches wherein the 
computer processor user table additionally comprises any class membership of each the 
user (see Bapat et al. , column 10, lines 4-10), wherein the user may be authorized with 
respect to the class table either by the class authorization or by the user authorization (see 
Bapat et aL , figure 15 A). 

As to claims 12, 26, and 49, Anderl et al. as modified, teaches wherein the 
computer processor user table and the class table permitted activities comprise a pluraHty 
of permitted activities, selected ones of which each of the users may be authorized to 
conduct, the permitted activities comprising 1) read access to data stored in the data 
storage media, 2) write access to data stored in the data storage media, 3) read all entries 
of the class table, 4) add entries to the class table, and 5) change/delete entries to the class 
table (see Bapat et al. , column 10, lines 35-47). 
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As to claims 13, and 27, Anderl et al. as modified, teaches wherein the computer 
processor additionally comprises a nonvolatile memory storing the user table (see Anderl 
et_aL, page 11, lines 14-26 and the class table (see Bapat et aL , column 7, lines 18-24). 

As to claim 33, Anderl et al teaches wherein the user table comprises a plurality 
of the permitted activities, selected ones of which each of the users may be authorized to 
conduct, the permitted activities comprising 1) read access to data stored in the data 
storage media, 2) vmte access to data stored in the data storage media (see figure 6). 

Anderl et al. does not teach the permitted activities comprising 3) read the user 
entry of the user table, 4) read all entries of the user table, 5) add entries to the user table, 
and 6) change/delete entries to the user table; and wherein the transmitting step comprises 
transmitting authorization to conduct the selected the user permitted activities the user is 
authorized to conduct. 

Bapat et al. teaches the permitted activities comprising 3) read the user entry of 
the user table, 4) read all entries of the user table, 5) add entries to the user table, and 6) 
change/delete entries to the user table; and wherein the transmitting step comprises 
transmitting authorization to conduct the selected the user permitted activities the user is 
authorized to conduct (see column 10, hnes 35-47). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Anderl et al. to include the permitted 
activities comprising 3) read the user entry of the user table, 4) read all entries of the user 
table, 5) add entries to the user table, and 6) change/delete entries to the user table; and 
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wherein the transmitting step comprises transmitting authorization to conduct the selected 
the user permitted activities the user is authorized to conduct. 

It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Anderl et al. by the teachings of Bapat et al. 
because the permitted activities comprising 3) read the user entry of the user table, 4) 
read all entries of the user table, 5) add entries to the user table, and 6) change/delete 
entries to the user table; and wherein the transmitting step comprises transmitting 
authorization to conduct the selected the user permitted activities the user is authorized to 
conduct would give a way to grant or deny access to certain users (see Bapat et al , 
column 11, lines 4-7). 

As to claim 34, Anderl et al. does not teach wherein the user table comprises a 
separate entry for each the user identifier and the permitted activity the user is authorized 
to conduct; and wherein the transmitting step additionally comprises identifying the user 
permitted activities from the separate entries. 

Bapat et al. teaches wherein the user table comprises a separate entry for each the 
user identifier and the permitted activity the user is authorized to conduct; and wherein 
the transmitting step additionally comprises identifying the user permitted activities from 
the separate entries (see column 10, lines 35-47). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Anderl et al. to include wherein the 
user table comprises a separate entry for each the user identifier and the permitted activity 
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the user is authorized to conduct; and wherein the transmitting step additionally 
comprises identifying the user permitted activities from the separate entries. 

It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Anderl et aL by the teachings of Bapat et al. 
because wherein the user table comprises a separate entry for each the user identifier and 
the permitted activity the user is authorized to conduct; and wherein the transmitting step 
additionally comprises identifying the user permitted activities from the separate entries 
would give a way to grand or deny access to certain users (see Bapat et al. , column 11, 
lines 4-7). 

As to claim 38, Anderl et al. as modified, teaches wherein the user table and the 
class table comprise a plurality of permitted activities, selected ones of which each of the 
users may be authorized to conduct, the permitted activities comprising 1) read access to 
data stored in the data storage media, 2) write access to data stored in the data storage 
media, 3) read all entries of the class table, 4) add entries to the class table, and 5) 
change/delete entries to the class table; and wherein the transmitting step comprises 
transmitting authorization to conduct the selected the user and the class permitted 
activities the user is authorized to conduct (see Bapat et al , column 10, lines 35-47), 

Response to Arguments 
8. Applicant's arguments filed on 22-December-2003 with respect to rejected claims 
have been fully considered but they are moot in view of the new ground(s) of rejection. 
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Conclusion 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jacob F. Betit whose telephone number is (703) 305- 
3735. The examiner can normally be reached on Monday through Friday 9 am to 5 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dov Popovici can be reached on (703) 305-3830. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-2 1 7-9 1 97 (toll-free). 



jfb 

February 24, 2004 
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